Security

Ask something
Discussion Locked

Windows XP Security Concerns

0 helpful
2 replies

by sunsolaris

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi:

I'm appealing to the technical community to help me objectively separate religious hype and rhetoric from documented fact.

I'm a systems administrator for Sun Microsystems. As you can imagine, brining windows XP into this place is viewed the same way as being a Christian who sacrifices a virgin at the altar of satan.

Over the past few weeks, I've heard many arguments over the security of Windows XP (or lack thereof). Specifically, the "secret" data that is bring transmitted and received over SSH.

Please tell me, what's the truth regarding Windows XP. Respectfully, I'm not looking for anyone's opinions as I've got enough of those. But if someone can please provide me with valid white papers and related documents to help me get to the truth. What are the real risks to having XP on my network.

2 replies

by lordinfidel

Not sure if you have checked already.

There is some stuff on Bugtraq about xp.

I just got a post from a Tomasz Polus, who apparently is doing security research on XP and is writing a xp security book.

There was a white paper done on xp regarding direct access to the kernel subsystem. I can't remember what site I found it on. But it was thru a link on one of the security discussions on TR.

by milstar

A remotely exploitable buffer overflow exists in the UPnP service of Windows XP A
malicious user can transmit a malformed NOTIFY request to a vulnerable machine and
overflow an unchecked buffer in the UPnP service This service runs in the SYSTEM
context under Windows XP and can result in a full system compromise, allowing the
attacker to gain control of the affected machine.

A condition also exists in the implementation of SSDP that could lead to a DOS or DDoS
attack by transmitting a malformed NOTIFY directive at a targeted machine or group of
machines. The targets can be forced to endlessly transmit HTTP requests to a final target.

This discussion is closed to new replies.